feat(action): trust-check/codeowners - Verify actor in CODEOWNERS
@aRustyDev 已经在做这个了。
开始于 2026年1月27日。
评估
这个 Issue 还没有评估数据。
描述
Parent Epic
Part of #22 (Atomic Release Pipeline Actions)
Priority
P2 - Trust validation for auto-merge workflows
Description
Create a composite action that verifies the workflow actor is listed in CODEOWNERS for relevant paths.
Inputs
| Input | Required | Default | Description |
|---|---|---|---|
actor |
No | github.actor |
GitHub username to verify |
paths |
No | - | Paths to check ownership for (comma-separated) |
codeowners-path |
No | .github/CODEOWNERS |
Path to CODEOWNERS file |
token |
No | github.token |
GitHub token |
Outputs
| Output | Description |
|---|---|
is-owner |
"true" if actor is a codeowner |
matched-pattern |
CODEOWNERS pattern that matched |
owners |
Comma-separated list of owners for the path |
Usage Example
- uses: arustydev/gha/actions/trust-check/codeowners@v1
id: codeowners
with:
actor: ${{ github.actor }}
paths: "charts/my-chart"
- if: steps.codeowners.outputs.is-owner == 'true'
run: echo "Actor is authorized"
Implementation Notes
- Parses CODEOWNERS file format
- Supports user, team, and email patterns
- Handles glob patterns in CODEOWNERS
- Checks team membership via API if team pattern
Source Reference
helm-charts/.github/workflows/auto-merge-integration.yaml:
- CODEOWNERS verification logic
- 主要语言
- Shell
- 星标
- 0
- 派生
- 0
- PR 合并指标
- 30 天内没有已合并 PR
贡献指南
从这里开始
- 先读完整个 Issue，再读项目的贡献指南。
- 在 Issue 下留言说明你要接手 —— 这能避免两个人做同样的事。
- Fork 仓库，在一个分支上完成修改。
- 提交 Pull Request，并在描述里引用这个 Issue 编号。
aRustyDev/gh 的其他 Issue
-
dependencies github-actions
难度 1/5 1 小时以内 新手友好度 10/100
-
dependencies github-actions
难度 1/5 1 小时以内 新手友好度 15/100
-
dependencies github-actions
难度 1/5 1 小时以内 新手友好度 50/100
-
dependencies github-actions
难度 2/5 1-3 小时 新手友好度 20/100
-
dependencies github-actions
难度 2/5 1-3 小时 新手友好度 10/100
相似的 Issue
-
难度 2/5 1-3 小时 新手友好度 68/100
CycloneDX/transparency-exchange-api#393 · 1 条评论 ·
-
module/agent platform/macos type/bug/regression
难度 2/5 1-3 小时 新手友好度 88/100
-
难度 1/5 1 小时以内 新手友好度 92/100
CachyOS/cachyos-aur-derived#754 ·
-
难度 1/5 1 小时以内 新手友好度 90/100
CrowdStrike/falcon-scripts#528 ·
-
bug(cli): hapi doctor inline-media prints a fabricated B:\ helper-script path in packaged installs 未关闭
难度 2/5 1-3 小时 新手友好度 70/100